Biometric Authentication Mutual Security Level Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current biometric authentication systems face challenges in ensuring secure mutual authentication between devices, as they need to assess and match the security levels of counterpart devices, which can lead to vulnerabilities in authorization and access control.
Innovation Solution
A biometric authentication system comprising a device with a secure element for storing biometric information and security levels, along with processing circuitry for acquiring and authenticating users and devices based on these levels, ensuring secure communication and authentication protocols are implemented to match and validate security standards.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If mutual authentication with security level verification is performed between biometric authentication device and information processing device, then security reliability is improved, but device complexity and authentication process complexity increase
Solution Approach 1:
The information processing device performs preliminary verification of the biometric authentication device's security level before initiating full mutual authentication. The authentication controller verifies whether the biometric authentication device possesses sufficient security capabilities (such as secure element, trusted execution environment, or platform secure processor) in advance, and only proceeds with complete authentication if the security level meets requirements, thereby avoiding unnecessary complex authentication processes with insufficient devices
Solution Approach 2:
Different security verification strategies are applied to different parts of the authentication system based on their security capabilities. The system identifies specific security components (secure element, trusted execution environment, platform secure processor) in the biometric authentication device and applies targeted verification methods for each component type, rather than using a uniform verification approach for all devices
2Measurement precision
If security level verification is performed before authentication, then authorization accuracy is improved, but authentication time increases
Solution Approach 1:
Security level verification is performed as a preliminary step before full authentication to filter out devices that cannot meet security requirements. The authentication controller quickly checks for the presence of required security components (secure element, trusted execution environment, or platform secure processor) and terminates the authentication process early for insufficient devices, avoiding waste of authentication time on incompatible devices while ensuring accurate authorization for qualified devices
Data Source
AI summary
According to one embodiment, a biometric authentication system includes a biometric authentication device and an information processing device. The biometric authentication device includes a first secure element configured to store data related to biometric information and data related to a first security level, and a first authenticator configured to perform authentication of a user based on the biometric information and perform authentication of the information processing device based on a second security level. The information processing device includes a second secure element configured to store data related to the second security level, and a second authenticator configured to perform authentication of the biometric authentication device based on the first security level.